Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/aMDb2aqsB1gnaYoCsXASMw4mf7g.roa
File: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (raw, json)
Hash identifier: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=
Subject key identifier: 68:C0:DB:D9:AA:AC:07:58:27:69:8A:02:B1:70:12:33:0E:26:7F:B8
Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial: 0194228E16EB0F8FC86E39E81C632D88C004
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/aMDb2aqsB1gnaYoCsXASMw4mf7g.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43122
IP address blocks: 194.110.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:16:eb:0f:8f:c8:6e:39:e8:1c:63:2d:88:c0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c0dbd9aaac075827698a02b17012330e267fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:f6:8f:a5:2a:d2:70:70:59:87:95:2a:6b:
68:69:13:bd:30:c1:8f:c2:77:36:58:68:8c:e8:37:
9f:7e:e2:86:f3:4f:cb:83:37:b7:25:bb:6c:23:2b:
65:af:9d:73:c6:71:b2:7f:56:e6:ff:94:cb:28:71:
f6:82:5c:67:9a:a0:81:d7:28:66:71:98:98:45:c0:
9d:da:bc:85:50:57:fa:0a:a7:b3:0d:04:8c:e2:67:
7e:01:1e:d9:a9:80:2a:e5:1e:44:dd:83:eb:cf:76:
f3:49:a5:54:0b:1c:b0:1d:05:07:07:f3:22:2a:a6:
12:27:07:ee:b1:df:cf:49:32:5d:52:77:1e:f4:20:
4e:6f:d1:9d:0a:f1:98:23:4b:aa:20:39:55:35:5e:
05:6c:f4:55:a1:62:20:ba:f9:cb:ce:02:d3:47:bf:
4c:06:ef:eb:8b:2c:2e:b2:76:c8:de:33:cb:8a:80:
09:78:e0:23:03:be:5c:6f:ce:da:f8:a0:b4:a2:d3:
b3:07:a2:4b:b9:c7:53:a7:bd:64:aa:53:f4:39:83:
11:57:ec:2e:e3:4c:a3:3c:48:29:f4:27:d8:6f:aa:
92:2a:b8:d8:82:51:95:1c:ef:d7:14:6f:a9:70:3f:
f1:cb:75:02:0a:6b:85:c8:46:b7:be:75:21:4d:aa:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C0:DB:D9:AA:AC:07:58:27:69:8A:02:B1:70:12:33:0E:26:7F:B8
X509v3 Authority Key Identifier:
keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/aMDb2aqsB1gnaYoCsXASMw4mf7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.128.0/24
Signature Algorithm: sha256WithRSAEncryption
18:62:7a:dd:45:73:ec:88:15:a8:5e:40:f2:30:bb:6d:1e:bd:
f2:c8:86:d9:98:75:e4:32:6e:64:53:d5:3b:fc:d9:06:1c:0e:
d0:26:c0:dd:d6:32:70:7f:90:d8:71:2c:4f:7d:ed:82:63:80:
b2:d4:9e:88:5b:8d:0f:d4:05:53:99:6d:67:b4:a4:67:3c:ae:
e5:95:11:f4:2c:f1:ad:4a:31:7a:34:d0:0d:d3:d4:ef:ac:d6:
81:44:ea:b3:a1:b3:56:aa:5b:83:79:e1:95:1b:dd:30:8a:f2:
4c:18:c2:e3:64:50:d4:71:7a:59:33:15:b6:f9:83:f8:a7:e6:
4f:06:62:c1:cf:4e:72:43:14:b5:8d:d0:d4:cd:02:f1:f4:00:
a5:e4:6e:e7:0c:f3:f7:9b:8f:45:5e:0e:7e:45:73:71:53:79:
68:c9:37:ce:0d:0a:e0:c8:ba:55:5a:bf:9a:1f:53:c4:c7:ec:
9b:c9:3e:cf:22:bb:bf:33:94:46:4a:dc:cb:d9:1e:03:77:74:
bc:46:f3:60:09:3d:a4:14:90:9b:fe:3e:49:07:f9:59:1c:5b:
7a:c3:77:df:04:c1:8e:25:b9:5a:7e:fe:8c:e2:c4:94:39:45:
6d:d8:b4:79:07:43:e5:86:2e:69:90:5c:ea:b1:33:64:7d:5f:
a4:06:a9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:14 2025 by rpki-client